Duplicator vulnerabilities

2 known vulnerabilities in Duplicator from Duplicator. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Duplicator: Improper Privilege Management

  CVE-2026-115251Oct 25, 2026Duplicator

  The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to install Duplicator WordPress plugin before 5.0.0, and additionally exposes the routine without authentication, allowing an administrator of a multi

• 7.5 High severity

  Duplicator: Files or Directories Accessible to External Parties

  CVE-2023-6114Dec 26, 2023DuplicatorEPSS 30.9%

  The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the `backups-dup-lite/tmp` directory (or the `backups-dup-pro/tmp` directory in the Pro version), which temporarily stores files containin